Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ZLMediaKit VP9 RTP Parser Out-of-Bounds Read
Vulnerability Description
ZLMediaKit is a streaming media service framework. the VP9 RTP payload parser in ext-codec/VP9Rtp.cpp reads multiple fields from the RTP payload based on flag bits in the first byte, without verifying that sufficient data exists in the buffer. A crafted VP9 RTP packet with a 1-byte payload (0xFF, all flags set) causes the parser to read past the end of the allocated buffer, resulting in a heap-buffer-overflow. This vulnerability is fixed with commit 435dcbcbbf700fd63b2ca9eac6cef3b5ea75169d.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Vulnerability Type
跨界内存读
Vulnerability Title
ZLMediaKit 缓冲区错误漏洞
Vulnerability Description
ZLMediaKit是中国ZLMediaKit开源的一个基于 C++ 11 的高级运营级流媒体服务框架。 ZLMediaKit存在缓冲区错误漏洞，该漏洞源于VP9 RTP负载解析器缺少缓冲区边界验证，可能导致堆缓冲区溢出。
CVSS Information
N/A
Vulnerability Type
N/A